Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa
File:                     2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa (raw, json)
Hash identifier:          LCFDfwicccczbFzkbvdrugrlRHzNopd5qSv8Zdyb1Ts=
Subject key identifier:   D9:67:0C:0C:E1:FB:3B:C0:80:FA:1A:75:1A:A3:E9:74:F3:4F:2E:51
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0D0E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa
Signing time:             Mon 15 Jan 2024 21:24:29 +0000
ROA not before:           Mon 15 Jan 2024 21:24:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        2404::/26 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3342 (0xd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:24:29 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D9670C0CE1FB3BC080FA1A751AA3E974F34F2E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:2d:79:03:10:e4:39:6b:a3:99:ec:d8:72:
                    28:2d:73:b2:cf:85:ae:c8:ea:78:6c:2c:26:20:02:
                    00:a1:3f:85:d4:eb:2f:b2:78:d2:b8:8f:72:29:e3:
                    94:de:5c:9e:79:63:2c:65:94:70:bc:92:f5:5a:bd:
                    2f:46:db:7f:9c:ea:8e:67:7d:a9:2c:87:80:61:d4:
                    91:77:02:ad:f6:f1:a1:ca:04:31:70:aa:46:10:d4:
                    9f:ae:f0:15:f1:a8:51:8b:ef:12:83:89:d6:76:26:
                    7e:ed:54:31:be:75:22:0c:f7:3d:3b:1f:39:1d:d8:
                    63:62:04:74:1a:6c:34:be:2c:db:17:af:8f:ed:db:
                    d4:7a:c6:5e:2e:66:54:32:ae:6d:39:4c:62:07:dd:
                    57:87:0d:bf:0c:be:d3:6b:33:f4:2b:35:bf:01:84:
                    eb:37:86:cb:dc:a3:e1:1e:4a:4d:2b:7a:da:74:41:
                    af:b8:ee:12:54:e5:80:eb:3e:9e:3a:a9:1a:ca:c1:
                    e3:49:b5:7e:f6:60:16:5a:e2:d9:92:8b:9b:38:4e:
                    32:06:2c:5f:71:72:56:f2:6a:8b:9c:94:de:47:60:
                    15:ba:0b:99:86:3e:ff:bc:bd:e4:e2:36:f2:05:79:
                    0b:ba:72:fc:4c:2e:69:d0:10:e4:75:d3:52:65:56:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:0C:0C:E1:FB:3B:C0:80:FA:1A:75:1A:A3:E9:74:F3:4F:2E:51
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2WcMDOH7O8CA-hp1GqPpdPNPLlE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404::/26

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:08:8b:9d:ac:4e:1f:6c:7f:4a:15:94:34:d4:37:41:94:
         d0:3e:91:2c:29:5c:7b:ee:ee:d6:44:5b:4f:d0:e6:51:65:ad:
         45:6a:c9:b1:08:01:54:a0:52:12:46:ae:42:3c:9c:60:2c:ac:
         0d:7c:d8:4a:7f:1c:bb:63:67:a2:6d:20:ce:07:c9:56:bb:a1:
         ac:68:22:94:1f:5d:0e:35:0a:a5:8d:0a:9d:26:43:83:d2:03:
         c7:23:1c:a0:4f:a9:37:b4:7b:d1:67:11:a5:08:25:03:c0:03:
         e3:f3:60:fe:c6:ce:9a:43:d2:49:f8:7e:1f:05:da:cf:27:6c:
         64:b0:6b:d5:97:b1:0b:8e:59:cf:a0:00:4f:16:e7:2c:4b:81:
         f4:1d:50:2a:ba:68:b2:e6:65:a2:d5:cd:32:68:aa:8a:f3:70:
         06:6a:6a:5a:a9:44:30:81:d9:c0:a2:fa:0e:1c:6b:54:0b:ab:
         f6:80:e5:e1:6d:b0:35:7d:49:f3:0b:27:59:b9:34:d3:1f:d4:
         03:fb:c3:1b:17:f7:ac:b1:b1:f2:95:bc:7f:78:04:1b:76:2f:
         a7:8a:63:c1:20:9a:8f:17:5b:49:f3:8c:5e:8c:65:90:24:c0:
         fe:9c:64:ee:5d:37:a5:06:44:75:cb:5a:fa:05:02:ff:79:6b:
         29:e4:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----